MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 eae9fd488fe30bf1d81e928517f1b48f826ce1568c94d726e0b63a8596ad9124. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: eae9fd488fe30bf1d81e928517f1b48f826ce1568c94d726e0b63a8596ad9124
SHA3-384 hash: aac04715972fe5a0173ea5c2643e62264a17130722b8fecdba143ca103230c8707f8b24997d82399337b733a2666f445
SHA1 hash: f030f9da426cb0ff3fb4e8a4200a2c6da76e8d75
MD5 hash: 03029ff538842f18964d42ef82b1562f
humanhash: cardinal-aspen-pizza-island
File name:Enquiry-030820.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:747'431 bytes
First seen:2020-08-03 07:05:06 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:lfnAZT11gI6qXLcVD5lnKlHzMgdKY4waFFp97Ju1we4Fi/wAEVOSRHKr3:NnA9gQbc9GH5L4waFFp97ze4FIrSfxKb
TLSH 13F423990C54B91EE382C1E3219654D31B636F58FE0A17C88F1AC91FE8B875F665F20E
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: goldenwebsolution.com
Sending IP: 198.23.61.129
From: kumar <imelgarejo@diesa.com>
Subject: Enquiry
Attachment: Enquiry-030820.zip (contains "Enquiry-030820..exe")

MassLogger SMTP exfil server:
smtp.yandex.ru:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/eae9fd488fe30bf1d81e928517f1b48f826ce1568c94d726e0b63a8596ad9124/
Threat name:
ByteCode-MSIL.Trojan.Ymacco
Create hunting rule
Status:
Malicious
First seen:
2020-08-03 07:07:05 UTC
AV detection:
14 of 48 (29.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=5lu72sep4mf7dwa6skcrp4nur6bgzykwrsknojxawy5ilfvnsesa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/eae9fd488fe30bf1d81e928517f1b48f826ce1568c94d726e0b63a8596ad9124

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip eae9fd488fe30bf1d81e928517f1b48f826ce1568c94d726e0b63a8596ad9124

(this sample)

MassLogger

Executable exe 15ac6b1a7fdb92b545dae44b1a88d6328629944771bdce75002637cdbf299027

  
Dropping
MD5 a2a1d155dd4b111472471f6e5e8265e9
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 15ac6b1a7fdb92b545dae44b1a88d6328629944771bdce75002637cdbf299027

Comments